- Table of Contents
-
- 07-System
- 01-High availability group
- 02-VRRP
- 03-Track
- 04-BFD
- 05-NQA
- 06-Basic log settings
- 07-Session log settings
- 08-NAT log settings
- 09-AFT log settings
- 10-Threat log settings
- 11-Application audit log settings
- 12-NetShare log settings
- 13-URL filtering log settings
- 14-Attack defense log settings
- 15-Bandwidth alarm logs
- 16-Configuration log settings
- 17-Security policy log
- 18-Heartbeat log settings
- 19-IP access logs
- 20-WAF log settings
- 21-Bandwidth management logs
- 22-Context rate limit logging
- 23-Report settings
- 24--Session settings
- 25-MAC authentication online users
- 26-Signature upgrade
- 27-Software upgrade
- 28-License management
- 29-IRF
- 30-IRF advanced settings
- 31-Contexts
- 32-Administrators
- 33-Date and time
- 34-MAC address learning through a Layer 3 device
- 35-SNMP
- 36-Configuration management
- 37-About
- 38-Reboot
- 39-Ping
- 40-Tracert
- 41-Packet capture
- 42-Webpage Diagnosis
- 43-Diagnostic Info
- 44-Packet trace
- 45-Load balancing test
- 46-IPsec diagnosis
- 47-Fast Internet Access
- 48-IP reputation log settings
- 49-Load balancing logging
- Related Documents
-
Title | Size | Download |
---|---|---|
07-Session log settings | 25.07 KB |
Session log settings
This help contains the following topics:
· Configure session log setting
Introduction
Session logs provide information about user access, IP address translation, and network traffic for security auditing. They can be output in flow log or fast log output format.
The device supports time-based or traffic-based logging:
· Time-based logging—The device outputs session logs regularly.
· Traffic-based logging—The device outputs a session log when the traffic amount of a session reaches a threshold.
If you set both time-based and traffic-based logging, the device outputs a session log when whichever is reached. After outputting a session log, the device resets the traffic counter and restarts the interval for the session.
Session logs can be generated only when session logging is enabled on interfaces.
Configure session log settings
Procedure
1. Click the System tab.
2. Select Log Settings > Session Log Settings.
3. Configure session logging.
Table 1 Session logging configuration items
Item |
Description |
Log type |
Select a log type. By default, flow log is used. |
Session creation logging |
This feature enables the device to output a session log when a session entry is created. |
Session deletion logging |
This feature enables the device to output a session log when a session entry is removed. |
Traffic-based logging |
Set either the byte-based threshold or the packet-based threshold. The device outputs a session log when the traffic amount of a session reaches the set threshold. |
Time-based logging |
Set the time-based threshold for the device to output session logs. |
4. Click Apply.
5. Click Add interface to enable session logging on the specified interface.
Table 2 Configuration items for enabling session logging on an interface
Item |
Description |
IP version |
Select an IP version, IPv4 or IPv6. |
Port |
Select a port. You can also enable session logging on the specified directions of the port. |
ACL |
Select an ACL to filter IPv4 or IPv6 sessions that can trigger session logging on the interface. If no ACL is specified, the device outputs session logs for all IPv4 or IPv6 sessions on the interface. |
6. Click OK.
7. Verify the configuration on the Session Logging page.